nanog mailing list archives
Re: IT security people sleep well
From: Henning Brauer <hb-nanog () bsws de>
Date: Mon, 7 Jun 2004 18:11:26 +0200
* Robert Boyle <robert () tellurian com> [2004-06-07 14:08]:
I really truly don't see the problem with plaintext telnet management of routers.
It is exactly this belief in the security of your networks that gets this industry in so deep shit. ever heard of multilayer security? some little problem somewhere that allows an attacker to sniff your telnet traffic and you are d00med. that might be as simple as a routing fuckup. You loose nothing with using ssh instead of telnet. You win a lot. ssh is a basic component for secure network management. it is not the one magic piece that turns a collection of crap into an ubersecure network of course, as some people seem to imply. not seeing the problem with cleartext telnet for remote logins in 2004, wether ACL'd or not, is just ... oh man, I don't have words for this. -- Henning Brauer, BS Web Services, http://bsws.de hb () bsws de - henning () openbsd org Unix is very simple, but it takes a genius to understand the simplicity. (Dennis Ritchie)
Current thread:
- Re: SSH on the router - was( IT security people sleep well), (continued)
- Re: SSH on the router - was( IT security people sleep well) Alex Bligh (Jun 07)
- Re: SSH on the router - was( IT security people sleep well) Randy Bush (Jun 07)
- Re: SSH on the router - was( IT security people sleep well) Valdis . Kletnieks (Jun 07)
- Re: SSH on the router - was( IT security people sleep well) Alex Bligh (Jun 07)
- Re: SSH on the router - was( IT security people sleep well) Randy Bush (Jun 07)
- Re: IT security people sleep well Daniel Senie (Jun 06)
- Re: IT security people sleep well Priscilla Oppenheimer (Jun 07)
- Re: IT security people sleep well Stephen Sprunk (Jun 07)
- Re: IT security people sleep well Robert Boyle (Jun 06)
- Re: IT security people sleep well Henning Brauer (Jun 07)
- Re: IT security people sleep well Robert Boyle (Jun 07)
- Re: IT security people sleep well Henning Brauer (Jun 07)
- Re: IT security people sleep well Stephen Sprunk (Jun 07)
- Re: IT security people sleep well Valdis . Kletnieks (Jun 07)
- Re: IT security people sleep well Henning Brauer (Jun 08)
- RE: IT security people sleep well Dan Hollis (Jun 07)
- Re: IT security people sleep well Valdis . Kletnieks (Jun 07)